CVE-2024-30253
Handling untrusted input can result in a crash, leading to loss of availability / denial of service
@solana/web3.js is the Solana JavaScript SDK. Using particular inputs with @solana/web3.js will result in memory exhaustion (OOM). If you have a server, client, mobile, or desktop product that accepts untrusted input for use with @solana/web3.js, your application/service may crash, resulting in a loss of availability. This vulnerability is fixed in 1.0.1, 1.10.2, 1.11.1, 1.12.1, 1.1.2, 1.13.1, 1.14.1, 1.15.1, 1.16.2, 1.17.1, 1.18.1, 1.19.1, 1.20.3, 1.21.1, 1.22.1, 1.23.1, 1.24.3, 1.25.1, 1.26.1, 1.27.1, 1.28.1, 1.2.8, 1.29.4, 1.30.3, 1.31.1, 1.3.1, 1.32.3, 1.33.1, 1.34.1, 1.35.2, 1.36.1, 1.37.3, 1.38.1, 1.39.2, 1.40.2, 1.41.11, 1.4.1, 1.42.1, 1.43.7, 1.44.4, 1.45.1, 1.46.1, 1.47.5, 1.48.1, 1.49.1, 1.50.2, 1.51.1, 1.5.1, 1.52.1, 1.53.1, 1.54.2, 1.55.1, 1.56.3, 1.57.1, 1.58.1, 1.59.2, 1.60.1, 1.61.2, 1.6.1, 1.62.2, 1.63.2, 1.64.1, 1.65.1, 1.66.6, 1.67.3, 1.68.2, 1.69.1, 1.70.4, 1.71.1, 1.72.1, 1.7.2, 1.73.5, 1.74.1, 1.75.1, 1.76.1, 1.77.4, 1.78.8, 1.79.1, 1.80.1, 1.81.1, 1.8.1, 1.82.1, 1.83.1, 1.84.1, 1.85.1, 1.86.1, 1.87.7, 1.88.1, 1.89.2, 1.90.2, 1.9.2, and 1.91.3.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Handling untrusted input can result in a crash, leading to loss of availability / denial of service
@solana/web3.js is the Solana JavaScript SDK. Using particular inputs with @solana/web3.js will result in memory exhaustion (OOM). If you have a server, client, mobile, or desktop product that accepts untrusted input for use with @solana/web3.js, your application/service may crash, resulting in a loss of availability. This vulnerability is fixed in 1.0.1, 1.10.2, 1.11.1, 1.12.1, 1.1.2, 1.13.1, 1.14.1, 1.15.1, 1.16.2, 1.17.1, 1.18.1, 1.19.1, 1.20.3, 1.21.1, 1.22.1, 1.23.1, 1.24.3, 1.25.1, 1.26.1, 1.27.1, 1.28.1, 1.2.8, 1.29.4, 1.30.3, 1.31.1, 1.3.1, 1.32.3, 1.33.1, 1.34.1, 1.35.2, 1.36.1, 1.37.3, 1.38.1, 1.39.2, 1.40.2, 1.41.11, 1.4.1, 1.42.1, 1.43.7, 1.44.4, 1.45.1, 1.46.1, 1.47.5, 1.48.1, 1.49.1, 1.50.2, 1.51.1, 1.5.1, 1.52.1, 1.53.1, 1.54.2, 1.55.1, 1.56.3, 1.57.1, 1.58.1, 1.59.2, 1.60.1, 1.61.2, 1.6.1, 1.62.2, 1.63.2, 1.64.1, 1.65.1, 1.66.6, 1.67.3, 1.68.2, 1.69.1, 1.70.4, 1.71.1, 1.72.1, 1.7.2, 1.73.5, 1.74.1, 1.75.1, 1.76.1, 1.77.4, 1.78.8, 1.79.1, 1.80.1, 1.81.1, 1.8.1, 1.82.1, 1.83.1, 1.84.1, 1.85.1, 1.86.1, 1.87.7, 1.88.1, 1.89.2, 1.90.2, 1.9.2, and 1.91.3.
- Record
CVE-2024-30253- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-119
- Updated
- 2026-11-02
EUVDEUVD-2024-1160
@solana/web3.js is the Solana JavaScript SDK. Using particular inputs with @solana/web3.js will result in memory exhaustion (OOM). If you have a server, client, mobile, or desktop product that accepts untrusted input for use with @solana/web3.js, your application/service may crash, resulting in a loss of availability. This vulnerability is fixed in 1.0.1, 1.10.2, 1.11.1, 1.12.1, 1.1.2, 1.13.1, 1.14.1, 1.15.1, 1.16.2, 1.17.1, 1.18.1, 1.19.1, 1.20.3, 1.21.1, 1.22.1, 1.23.1, 1.24.3, 1.25.1, 1.26.1, 1.27.1, 1.28.1, 1.2.8, 1.29.4, 1.30.3, 1.31.1, 1.3.1, 1.32.3, 1.33.1, 1.34.1, 1.35.2, 1.36.1, 1.37.3, 1.38.1, 1.39.2, 1.40.2, 1.41.11, 1.4.1, 1.42.1, 1.43.7, 1.44.4, 1.45.1, 1.46.1, 1.47.5, 1.48.1, 1.49.1, 1.50.2, 1.51.1, 1.5.1, 1.52.1, 1.53.1, 1.54.2, 1.55.1, 1.56.3, 1.57.1, 1.58.1, 1.59.2, 1.60.1, 1.61.2, 1.6.1, 1.62.2, 1.63.2, 1.64.1, 1.65.1, 1.66.6, 1.67.3, 1.68.2, 1.69.1, 1.70.4, 1.71.1, 1.72.1, 1.7.2, 1.73.5, 1.74.1, 1.75.1, 1.76.1, 1.77.4, 1.78.8, 1.79.1, 1.80.1, 1.81.1, 1.8.1, 1.82.1, 1.83.1, 1.84.1, 1.85.1, 1.86.1, 1.87.7, 1.88.1, 1.89.2, 1.90.2, 1.9.2, and 1.91.3.
- Record
EUVD-2024-1160- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8m45-2rjm-j347
Handling untrusted input can result in a crash, leading to loss of availability / denial of service
Using particular inputs with @solana/web3.js will result in memory exhaustion (OOM).
If you have a server, client, mobile, or desktop product that accepts untrusted input for use with @solana/web3.js, your application/service may crash, resulting in a loss of availability.
- Record
GHSA-8m45-2rjm-j347- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-119
- Updated
- 2026-11-02
NVD
@solana/web3.js is the Solana JavaScript SDK. Using particular inputs with @solana/web3.js will result in memory exhaustion (OOM). If you have a server, client, mobile, or desktop product that accepts untrusted input for use with @solana/web3.js, your application/service may crash, resulting in a loss of availability. This vulnerability is fixed in 1.0.1, 1.10.2, 1.11.1, 1.12.1, 1.1.2, 1.13.1, 1.14.1, 1.15.1, 1.16.2, 1.17.1, 1.18.1, 1.19.1, 1.20.3, 1.21.1, 1.22.1, 1.23.1, 1.24.3, 1.25.1, 1.26.1, 1.27.1, 1.28.1, 1.2.8, 1.29.4, 1.30.3, 1.31.1, 1.3.1, 1.32.3, 1.33.1, 1.34.1, 1.35.2, 1.36.1, 1.37.3, 1.38.1, 1.39.2, 1.40.2, 1.41.11, 1.4.1, 1.42.1, 1.43.7, 1.44.4, 1.45.1, 1.46.1, 1.47.5, 1.48.1, 1.49.1, 1.50.2, 1.51.1, 1.5.1, 1.52.1, 1.53.1, 1.54.2, 1.55.1, 1.56.3, 1.57.1, 1.58.1, 1.59.2, 1.60.1, 1.61.2, 1.6.1, 1.62.2, 1.63.2, 1.64.1, 1.65.1, 1.66.6, 1.67.3, 1.68.2, 1.69.1, 1.70.4, 1.71.1, 1.72.1, 1.7.2, 1.73.5, 1.74.1, 1.75.1, 1.76.1, 1.77.4, 1.78.8, 1.79.1, 1.80.1, 1.81.1, 1.8.1, 1.82.1, 1.83.1, 1.84.1, 1.85.1, 1.86.1, 1.87.7, 1.88.1, 1.89.2, 1.90.2, 1.9.2, and 1.91.3.
- Record
CVE-2024-30253- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-119
- Updated
- 2026-11-02
OSV
Handling untrusted input can result in a crash, leading to loss of availability / denial of service
@solana/web3.js is the Solana JavaScript SDK. Using particular inputs with @solana/web3.js will result in memory exhaustion (OOM). If you have a server, client, mobile, or desktop product that accepts untrusted input for use with @solana/web3.js, your application/service may crash, resulting in a loss of availability. This vulnerability is fixed in 1.0.1, 1.10.2, 1.11.1, 1.12.1, 1.1.2, 1.13.1, 1.14.1, 1.15.1, 1.16.2, 1.17.1, 1.18.1, 1.19.1, 1.20.3, 1.21.1, 1.22.1, 1.23.1, 1.24.3, 1.25.1, 1.26.1, 1.27.1, 1.28.1, 1.2.8, 1.29.4, 1.30.3, 1.31.1, 1.3.1, 1.32.3, 1.33.1, 1.34.1, 1.35.2, 1.36.1, 1.37.3, 1.38.1, 1.39.2, 1.40.2, 1.41.11, 1.4.1, 1.42.1, 1.43.7, 1.44.4, 1.45.1, 1.46.1, 1.47.5, 1.48.1, 1.49.1, 1.50.2, 1.51.1, 1.5.1, 1.52.1, 1.53.1, 1.54.2, 1.55.1, 1.56.3, 1.57.1, 1.58.1, 1.59.2, 1.60.1, 1.61.2, 1.6.1, 1.62.2, 1.63.2, 1.64.1, 1.65.1, 1.66.6, 1.67.3, 1.68.2, 1.69.1, 1.70.4, 1.71.1, 1.72.1, 1.7.2, 1.73.5, 1.74.1, 1.75.1, 1.76.1, 1.77.4, 1.78.8, 1.79.1, 1.80.1, 1.81.1, 1.8.1, 1.82.1, 1.83.1, 1.84.1, 1.85.1, 1.86.1, 1.87.7, 1.88.1, 1.89.2, 1.90.2, 1.9.2, and 1.91.3.
- Record
CVE-2024-30253- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-119
- Updated
- 2026-11-02
OSVGHSA-8m45-2rjm-j347
Handling untrusted input can result in a crash, leading to loss of availability / denial of service
Using particular inputs with @solana/web3.js will result in memory exhaustion (OOM).
If you have a server, client, mobile, or desktop product that accepts untrusted input for use with @solana/web3.js, your application/service may crash, resulting in a loss of availability.
- Record
GHSA-8m45-2rjm-j347- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
@solana/web3.jsnpm |
1.91.0 up to 1.91.3 | 1.91.3 |
@solana/web3.jsnpm |
1.90 up to 1.90.2 | 1.90.2 |
@solana/web3.jsnpm |
1.89 up to 1.89.2 | 1.89.2 |
@solana/web3.jsnpm |
1.88.0 to 1.88.0 | 1.88.1 |
@solana/web3.jsnpm |
1.87.0 up to 1.87.7 | 1.87.7 |
@solana/web3.jsnpm |
1.86.0 to 1.86.0 | 1.86.1 |
@solana/web3.jsnpm |
1.85.0 to 1.85.0 | 1.85.1 |
@solana/web3.jsnpm |
1.84.0 to 1.84.0 | 1.84.1 |
@solana/web3.jsnpm |
1.83.0 to 1.83.0 | 1.83.1 |
@solana/web3.jsnpm |
1.82.0 to 1.82.0 | 1.82.1 |
Show 136 moreShow less
| Package | Affected | Fixed |
|---|---|---|
@solana/web3.jsnpm |
1.81.0 to 1.81.0 | 1.81.1 |
@solana/web3.jsnpm |
1.80.0 to 1.80.0 | 1.80.1 |
@solana/web3.jsnpm |
1.79.0 to 1.79.0 | 1.79.1 |
@solana/web3.jsnpm |
1.78 up to 1.78.8 | 1.78.8 |
@solana/web3.jsnpm |
1.77 up to 1.77.4 | 1.77.4 |
@solana/web3.jsnpm |
1.76.0 to 1.76.0 | 1.76.1 |
@solana/web3.jsnpm |
1.75.0 to 1.75.0 | 1.75.1 |
@solana/web3.jsnpm |
1.74.0 to 1.74.0 | 1.74.1 |
@solana/web3.jsnpm |
1.73.0 up to 1.73.5 | 1.73.5 |
@solana/web3.jsnpm |
1.72.0 to 1.72.0 | 1.72.1 |
@solana/web3.jsnpm |
1.71.0 to 1.71.0 | 1.71.1 |
@solana/web3.jsnpm |
1.70.0 up to 1.70.4 | 1.70.4 |
@solana/web3.jsnpm |
1.69.0 to 1.69.0 | 1.69.1 |
@solana/web3.jsnpm |
1.68.0 up to 1.68.2 | 1.68.2 |
@solana/web3.jsnpm |
1.67.0 up to 1.67.3 | 1.67.3 |
@solana/web3.jsnpm |
1.66.0 up to 1.66.6 | 1.66.6 |
@solana/web3.jsnpm |
1.65.0 to 1.65.0 | 1.65.1 |
@solana/web3.jsnpm |
1.64.0 to 1.64.0 | 1.64.1 |
@solana/web3.jsnpm |
1.63.0 up to 1.63.2 | 1.63.2 |
@solana/web3.jsnpm |
1.62.0 up to 1.62.2 | 1.62.2 |
@solana/web3.jsnpm |
1.61.0 up to 1.61.2 | 1.61.2 |
@solana/web3.jsnpm |
1.60.0 to 1.60.0 | 1.60.1 |
@solana/web3.jsnpm |
1.59.0 up to 1.59.2 | 1.59.2 |
@solana/web3.jsnpm |
1.58.0 to 1.58.0 | 1.58.1 |
@solana/web3.jsnpm |
1.57.0 to 1.57.0 | 1.57.1 |
@solana/web3.jsnpm |
1.56.0 up to 1.56.3 | 1.56.3 |
@solana/web3.jsnpm |
1.55.0 to 1.55.0 | 1.55.1 |
@solana/web3.jsnpm |
1.54.0 up to 1.54.2 | 1.54.2 |
@solana/web3.jsnpm |
1.53.0 to 1.53.0 | 1.53.1 |
@solana/web3.jsnpm |
1.52.0 to 1.52.0 | 1.52.1 |
@solana/web3.jsnpm |
1.51.0 to 1.51.0 | 1.51.1 |
@solana/web3.jsnpm |
1.50.0 up to 1.50.2 | 1.50.2 |
@solana/web3.jsnpm |
1.49.0 to 1.49.0 | 1.49.1 |
@solana/web3.jsnpm |
1.48.0 to 1.48.0 | 1.48.1 |
@solana/web3.jsnpm |
1.47.0 up to 1.47.5 | 1.47.5 |
@solana/web3.jsnpm |
1.46.0 to 1.46.0 | 1.46.1 |
@solana/web3.jsnpm |
1.45.0 to 1.45.0 | 1.45.1 |
@solana/web3.jsnpm |
1.44.0 up to 1.44.4 | 1.44.4 |
@solana/web3.jsnpm |
1.43.0 up to 1.43.7 | 1.43.7 |
@solana/web3.jsnpm |
1.42.0 to 1.42.0 | 1.42.1 |
@solana/web3.jsnpm |
1.41.0 up to 1.41.11 | 1.41.11 |
@solana/web3.jsnpm |
1.40.0 up to 1.40.2 | 1.40.2 |
@solana/web3.jsnpm |
1.39.0 up to 1.39.2 | 1.39.2 |
@solana/web3.jsnpm |
1.38.0 to 1.38.0 | 1.38.1 |
@solana/web3.jsnpm |
1.37.0 up to 1.37.3 | 1.37.3 |
@solana/web3.jsnpm |
1.36.0 to 1.36.0 | 1.36.1 |
@solana/web3.jsnpm |
1.35.0 up to 1.35.2 | 1.35.2 |
@solana/web3.jsnpm |
1.34.0 to 1.34.0 | 1.34.1 |
@solana/web3.jsnpm |
1.33.0 to 1.33.0 | 1.33.1 |
@solana/web3.jsnpm |
1.32.0 up to 1.32.2 | 1.32.2 |
@solana/web3.jsnpm |
1.31.0 to 1.31.0 | 1.31.1 |
@solana/web3.jsnpm |
1.30.0 up to 1.30.3 | 1.30.3 |
@solana/web3.jsnpm |
1.29.0 up to 1.29.4 | 1.29.4 |
@solana/web3.jsnpm |
1.28.0 to 1.28.0 | 1.28.1 |
@solana/web3.jsnpm |
1.27.0 to 1.27.0 | 1.27.1 |
@solana/web3.jsnpm |
1.26.0 to 1.26.0 | 1.26.1 |
@solana/web3.jsnpm |
1.25.0 to 1.25.0 | 1.25.1 |
@solana/web3.jsnpm |
1.24.0 up to 1.24.3 | 1.24.3 |
@solana/web3.jsnpm |
1.23.0 to 1.23.0 | 1.23.1 |
@solana/web3.jsnpm |
1.22.0 to 1.22.0 | 1.22.1 |
@solana/web3.jsnpm |
1.21.0 to 1.21.0 | 1.21.1 |
@solana/web3.jsnpm |
1.20.0 up to 1.20.3 | 1.20.3 |
@solana/web3.jsnpm |
1.19.0 to 1.19.0 | 1.19.1 |
@solana/web3.jsnpm |
1.18.0 to 1.18.0 | 1.18.1 |
@solana/web3.jsnpm |
1.17.0 to 1.17.0 | 1.17.1 |
@solana/web3.jsnpm |
1.16.0 up to 1.16.2 | 1.16.2 |
@solana/web3.jsnpm |
1.15.0 to 1.15.0 | 1.15.1 |
@solana/web3.jsnpm |
1.14.0 to 1.14.0 | 1.14.1 |
@solana/web3.jsnpm |
1.13.0 to 1.13.0 | 1.13.1 |
@solana/web3.jsnpm |
1.12.0 to 1.12.0 | 1.12.1 |
@solana/web3.jsnpm |
1.11.0 to 1.11.0 | 1.11.1 |
@solana/web3.jsnpm |
1.10.0 up to 1.10.2 | 1.10.2 |
@solana/web3.jsnpm |
1.9.0 up to 1.9.2 | 1.9.2 |
@solana/web3.jsnpm |
1.8.0 to 1.8.0 | 1.8.1 |
@solana/web3.jsnpm |
1.7.0 up to 1.7.2 | 1.7.2 |
@solana/web3.jsnpm |
1.6.0 to 1.6.0 | 1.6.1 |
@solana/web3.jsnpm |
1.5.0 to 1.5.0 | 1.5.1 |
@solana/web3.jsnpm |
1.4.0 to 1.4.0 | 1.4.1 |
@solana/web3.jsnpm |
1.3.0 to 1.3.0 | 1.3.1 |
@solana/web3.jsnpm |
1.2.0 up to 1.2.8 | 1.2.8 |
@solana/web3.jsnpm |
1.1.0 up to 1.1.2 | 1.1.2 |
@solana/web3.jsnpm |
before 1.0.1 | 1.0.1 |
@solana/web3.jsnpm |
1.88.0 up to 1.88.1 | 1.88.1 |
@solana/web3.jsnpm |
1.86.0 up to 1.86.1 | 1.86.1 |
@solana/web3.jsnpm |
1.85.0 up to 1.85.1 | 1.85.1 |
@solana/web3.jsnpm |
1.84.0 up to 1.84.1 | 1.84.1 |
@solana/web3.jsnpm |
1.83.0 up to 1.83.1 | 1.83.1 |
@solana/web3.jsnpm |
1.82.0 up to 1.82.1 | 1.82.1 |
@solana/web3.jsnpm |
1.81.0 up to 1.81.1 | 1.81.1 |
@solana/web3.jsnpm |
1.80.0 up to 1.80.1 | 1.80.1 |
@solana/web3.jsnpm |
1.79.0 up to 1.79.1 | 1.79.1 |
@solana/web3.jsnpm |
1.76.0 up to 1.76.1 | 1.76.1 |
@solana/web3.jsnpm |
1.75.0 up to 1.75.1 | 1.75.1 |
@solana/web3.jsnpm |
1.74.0 up to 1.74.1 | 1.74.1 |
@solana/web3.jsnpm |
1.72.0 up to 1.72.1 | 1.72.1 |
@solana/web3.jsnpm |
1.71.0 up to 1.71.1 | 1.71.1 |
@solana/web3.jsnpm |
1.69.0 up to 1.69.1 | 1.69.1 |
@solana/web3.jsnpm |
1.65.0 up to 1.65.1 | 1.65.1 |
@solana/web3.jsnpm |
1.64.0 up to 1.64.1 | 1.64.1 |
@solana/web3.jsnpm |
1.60.0 up to 1.60.1 | 1.60.1 |
@solana/web3.jsnpm |
1.58.0 up to 1.58.1 | 1.58.1 |
@solana/web3.jsnpm |
1.57.0 up to 1.57.1 | 1.57.1 |
@solana/web3.jsnpm |
1.55.0 up to 1.55.1 | 1.55.1 |
@solana/web3.jsnpm |
1.53.0 up to 1.53.1 | 1.53.1 |
@solana/web3.jsnpm |
1.52.0 up to 1.52.1 | 1.52.1 |
@solana/web3.jsnpm |
1.51.0 up to 1.51.1 | 1.51.1 |
@solana/web3.jsnpm |
1.49.0 up to 1.49.1 | 1.49.1 |
@solana/web3.jsnpm |
1.48.0 up to 1.48.1 | 1.48.1 |
@solana/web3.jsnpm |
1.46.0 up to 1.46.1 | 1.46.1 |
@solana/web3.jsnpm |
1.45.0 up to 1.45.1 | 1.45.1 |
@solana/web3.jsnpm |
1.42.0 up to 1.42.1 | 1.42.1 |
@solana/web3.jsnpm |
1.38.0 up to 1.38.1 | 1.38.1 |
@solana/web3.jsnpm |
1.36.0 up to 1.36.1 | 1.36.1 |
@solana/web3.jsnpm |
1.34.0 up to 1.34.1 | 1.34.1 |
@solana/web3.jsnpm |
1.33.0 up to 1.33.1 | 1.33.1 |
@solana/web3.jsnpm |
1.31.0 up to 1.31.1 | 1.31.1 |
@solana/web3.jsnpm |
1.28.0 up to 1.28.1 | 1.28.1 |
@solana/web3.jsnpm |
1.27.0 up to 1.27.1 | 1.27.1 |
@solana/web3.jsnpm |
1.26.0 up to 1.26.1 | 1.26.1 |
@solana/web3.jsnpm |
1.25.0 up to 1.25.1 | 1.25.1 |
@solana/web3.jsnpm |
1.23.0 up to 1.23.1 | 1.23.1 |
@solana/web3.jsnpm |
1.22.0 up to 1.22.1 | 1.22.1 |
@solana/web3.jsnpm |
1.21.0 up to 1.21.1 | 1.21.1 |
@solana/web3.jsnpm |
1.19.0 up to 1.19.1 | 1.19.1 |
@solana/web3.jsnpm |
1.18.0 up to 1.18.1 | 1.18.1 |
@solana/web3.jsnpm |
1.17.0 up to 1.17.1 | 1.17.1 |
@solana/web3.jsnpm |
1.15.0 up to 1.15.1 | 1.15.1 |
@solana/web3.jsnpm |
1.14.0 up to 1.14.1 | 1.14.1 |
@solana/web3.jsnpm |
1.13.0 up to 1.13.1 | 1.13.1 |
@solana/web3.jsnpm |
1.12.0 up to 1.12.1 | 1.12.1 |
@solana/web3.jsnpm |
1.11.0 up to 1.11.1 | 1.11.1 |
@solana/web3.jsnpm |
1.8.0 up to 1.8.1 | 1.8.1 |
@solana/web3.jsnpm |
1.6.0 up to 1.6.1 | 1.6.1 |
@solana/web3.jsnpm |
1.5.0 up to 1.5.1 | 1.5.1 |
@solana/web3.jsnpm |
1.4.0 up to 1.4.1 | 1.4.1 |
@solana/web3.jsnpm |
1.3.0 up to 1.3.1 | 1.3.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-30253 is a high vulnerability (CVSS 7.5) in Solanalabs Web3, published April 17, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.59%, the 48th percentile. Fixed in @solana/web3.js 1.91.3.
References
github.com/solana-labs/solana-web3.js/security/advisories/GHSA-8m45-2rjm-j347
nvd.nist.gov/vuln/detail/CVE-2024-30253